Wire transfer fraud, invoice scams, and FFKC bank recall¶

Ho fumana hore k'hamphani ea hau, moreki oa thekiso ea matlo le meaho, mokhatlo o sa etseng phaello, kapa lelapa le sa tsoa kenya mashome kapa makholo a likete tsa lidolara ho ak'haonte ea banka ea bomenemene ka Business Email Compromise (BEC), invoice ea barekisi e senyehileng, kapa ho koeteloa ka terata ea thekiso ea matlo ke ts'ohanyetso e feteletseng ea motsotso le motsotso. Ho fapana le bomenemene ba karete ea mokoloto, moo bareki ba sirelelitsoeng ke melao ea melato ea zero le lifensetere tsa ho khutlisa matsatsi a 60, phetisetso ea mohala oa banka (Fedwire, SWIFT, CHAPS, kapa SEPA) kapa khoebo ACH push e etselitsoe ho lula joalo ka chelete e ke keng ea fetoloa. Leha ho le joalo, ho fetisoa ha mohala ka bolotsana HA HO felise tšepo hang-hang haeba u ka nka khato nakong ea lihora tse 24 ho isa ho tse 48. Mahlahana a linokoane a ke ke a kena lekaleng la lehae habonolo ebe a ntša $250,000 ka chelete ea pampiri ea sebele; lichelete tse utsoitsoeng li tlameha ho qala ka ho lula ka har'a akhaonto ea "moulo oa chelete" kapa li fete ka har'a libanka tse hlakolang mongoli pele li fetisetsoa lebōpong la leoatle ho Hong Kong, Chaena, United Arab Emirates, Turkey, kapa ho sokoloha ka phapanyetsano ea chelete ea crypto. Haeba u etsa hore ho be le interbank ea molao Tšoara ha ho na Kotsi / Lengolo la Boikemelo ba ho hopola (SWIFT MT192 / pacs.004) le ho buisana le mokhatlo oa naha oa molao oa Financial Fraud Kill Chain (FFKC) pele banka e amohelang chelete e ntša chelete, libanka le baemeli ba 'muso ba emisa le ho fumana liranta tse limilione tse makholo lithapong tse utsoitsoeng selemo se seng le se seng.

Haeba bomenemene bo kenyelletsa ho koetela, ho koeteloa, kapa tšokelo ea hang-hang ea pefo, letsetsa nomoro ea hau ea tšohanyetso ea lehae (911 United States le Canada, 112 ho pholletsa le European Union, 999 United Kingdom) kapa sheba bukana ea rona ea machaba dinomoro tsa tshohanyetso hanghang. Bakeng sa bomenemene bohle ba li-invoice tsa khoebo, bosholu ba terata ea thekiso ea matlo le bomenemene, tlohela ntho e 'ngoe le e 'ngoe 'me u kenye mehato e 6 ea ho hopola maemo a tšohanyetso ka tlase nakong ea metsotso e 15 e tlang.

Etsa sena hona joale¶

1. ** Letsetsa Lefapha la Ts'ebetso la Originating Bank's Wire Fraud / Treasury Operations Desk nakong ea metsotso e 5 'me u batle "Fraud Recall with a Hold Hamless / Letter of Indemnity"**: Se ke oa ema moleng fensetereng ea morekisi oa lekala, 'me u se ke oa romella molaetsa o sireletsehileng oa webo. Letsetsa nomorong ea mohala ho rasiti ea lefapha la hau kapa mohala oa mohala oa lefapha la matlotlo a khoebo 'me u sebelise mantsoe ana hantle: "Re bahlaseluoa ba bomenemene bo teng ba Business Email Compromise ka terata e rometsoeng ka [Date/Nako] bakeng sa [$Amount].Fedwire Recall / SWIFT MT192 / camt.056) ho Banka e Receiving LE ho fana ka interbank Tshwara ha Ho na Kotsi / Letter of Indemnity lebitsong la rona e le hore Lefapha la Bomenemene la Banka le koala akhaonto ea mojalefa hang hang."
2. Ka nako e ts'oanang sheba Banka e Fumanang Boqhekanyetsi ka khoutu ea eona ea Routing / ABA / SWIFT BIC 'me u letsetse Lefapha la Bomenemene la Banka ka kotloloho: Se ke oa emela lihora tse 6 hore ofisi e ka morao ea banka ea hau e romelle molaetsa bankeng ea bolotsana. Sheba litaelo tsa terata tsa bolotsana tseo scammer a u rometseng tsona, fumana Receiving Bank Name le ABA Routing Number / IBAN / SWIFT BIC, letsetsa k'hamphani ea ts'ireletso ea khoebo ea banka kapa mohala oa thetso ka ho toba, 'me u ba fe nomoro ea IMAD / OMAD (bakeng sa US Fedwire), ** UETR chelete, Akhaonto ea chelete, ** UETR le chelete e ngata. Nomoro*. Le hoja banka e amohelang chelete e ke ke ea khutlisetsa chelete ho uena ka mohala, temoso e tobileng e tsoang ho motho ea hlokofalitsoeng e kopantsoe le IMAD/OMAD trace number hangata e khothaletsa bahlahlobisisi ba bomenemene ba ka hare ba Banka e Receiving Bank hore ba behe taolo ea bomenemene hang-hang akhaonteng ea senokoane ha ba ntse ba emetse Lengolo la Tokoloho la banka ea hau.
3. ** Hlahisa tletlebo ea tšohanyetso ea FBI IC3 (ic3.gov) United States ho kenya tšebetsong Sehlopha sa FBI Recovery Asset (RAT) le Ketane ea Kill ea Boqhekanyetsi ba Lichelete (FFKC): Haeba mohala o tsoa kapa o fetetse akhaonteng ea banka ea United States nakong ea lihora tse 72 tse fetileng (haholo-holo haeba $50,000+ kapa chelete leha e le efe e koalang ea thekiso ea matlo), e ea ho ic3.gov hona joale mme o fane ka tletlebo ea inthaneteng. Kenya ka ho hlaka "BEC / Wire Transfer Fraud - E Rometsoe Nakong ea Lihora Tse 72 tse Fetileng" ka holimo ho tlhaloso hammoho le banka e tsoang ho eona, banka e amohelang, linomoro tsa ABA, linomoro tsa akhaonto, le IMAD/OMAD latedisa dinomoro. FBI's ** Recovery Asset Team (RAT) e sebelisa mocha oa puisano oa nako ea nnete le libanka tsa lehae le FinCEN ho beha tsamaiso ea mmuso liak'haonteng tsa limule tsa lehae (ho fihlela sekhahla sa katleho sa nalane se fetang liperesente tse 70 ha se tlalehiloe pele mohala o ts'oara kantle ho naha).
4. Naheng ea UK, EU, Canada, kapa Australia, qala mohala oa hau oa ho emisa bosholu ba libanka hang hang:
   • United Kingdom: Letsetsa mohala oa bomenemene oa banka ea hau u sebelisa mohala oa 159 Stop Scams (lenya feela 159), tlaleha hang-hang ho Boqhekanyetsi ba Ketso (0300 123 2040: khetha khetho e sebetsang ea bomenemene haeba chelete e ntse e tsamaea hona joale), 'me u sebelise Payment Systems Regulator (PSR) Melao e Tlamang ea Puseletso ea Boqhekanyetsi ea APP (e qala ka Mphalane 2024 bakeng sa Litefo tse Potlakileng le CHAPS).
   • European Union: Batla hang-hang SEPA Khopotso ea Phetisetso ea Mokitlane oa SEPA (camt.056 / pacs.004) bakeng sa FRAD (Fraudulent Origin) ka banka ea hau 'me u fane ka tlaleho ea sepolesa hang-hang hore Units ea Naha ea Bohlale ba Lichelete (FIU) e ka fana ka thibelo ea tšohanyetso ea ho tšela moeli tlas'a litaelo tsa EU AML.
   • Canada & Australia: Tlaleha hang-hang ho desk ea ho hopola mehala ea banka, **Canadian Anti-Fraud Center (CAFC) / sepolesa sa lehae sa litlolo tsa molao tsa lichelete **, kapa Setsi sa Naha sa Australia sa Anti-Scam / AFCX Fraud Reporting Exchange (cyber.gov.au).
5. O SE KE UA romella motho ea qhekellang lengolo-tsoibila, U SE KE U Mpotsa "Na u fumane terata?", 'me U SE KE UA hlokomelisa molaetsa oa lengolo-tsoibila o senyehileng: Hang ha motho ea qhekellang a hlokomela hore o fumane bosholu, o tla kena hang-hang ka akhaonteng ea banka e amohelang chelete ebe o hlakola chelete efe kapa efe e setseng ka liporo tsa crypto kapa mehala ea machabeng. Boloka senokoane lefifing ka botlalo ha banka ea hau le FBI li koala ak'haonte eo u eang ho eona.
6. ** Boloka lihlooho tsa lengolo-tsoibila tse senyehileng (EML / MSG lifaele) le ho arola lebokose la mangolo le robehileng**: Se ke oa hlakola li-imeile tsa bomenemene tsa invoice. Etsa hore sehlopha sa hau sa IT se romelle lihlooho tsa melaetsa tse tala (Authentication-Results, Received: from, Reply-To) 'me u hlahlobe sistimi ea hau ea lengolo-tsoibila le lengolo-tsoibila la morekisi oa hau bakeng sa melao e patiloeng ea ho fetisa li-inbox (bona tataiso ea rona ho akhaonto ea imeile e hacked: melao e patiloeng ea ho fetisa le ho hlaphoheloa).

Sefate sa qeto: ho etsa sehopotso sa phetisetso ea banka ea tšohanyetso ka seporo sa tefo¶

Sebelisa chate ena ea tšebetso e potlakileng ho etsa protocol e nepahetseng ea ho hopola bakeng sa netweke ea hau ea litefo (Fedwire, ACH, SWIFT, kapa CHAPS/Faster Payments):

flowchart TD
    A["Mohala oa Bomenemene kapa Phetisetso ea Elektronike e Fumanehile"] --> B["Hlalosa Seporo se Nepahetseng sa Tefo 'me u Fumane Nomoro ea Leano Hang-hang"]
    B --> C{"Ke Seporo Sefe sa Tefo se Sebelisitsoeng?"}
    C -->|"US Domestic Wire (Fedwire)"| D["Fumana Nomoro ea Trace ea Litlhaku tse 22 tsa IMAD / OMAD ho tsoa Bankang ea Originating"]
    C -->|"Mohala oa Machaba (SWIFT)"| E["Fumana 36-Character SWIFT UETR & MT103 Copy ho tsoa ho Originating Bank"]
    C -->|"Phetisetso ea ACH ea Lehae ea US"| F["Fumana Nomoro ea Trace ea ACH ea 15-Digit ho tsoa Bankang ea Origining"]
    C -->|"Litefiso tse potlakileng tsa UK / CHAPS kapa EU SEPA"| G["Fumana Litefiso tse Potlakileng ka FPID / CHAPS Ref kapa ID ea Qetello-pele ea SEPA"]
    D --> H["1. Banka ea Tšimoloho e Romela Khopotso ea Bosholu ba Tšohanyetso + Tšoara Tokoloho e Se nang Kotsi ho Banka e Amohelang"]
    E --> H
    F --> I{"Ke matsatsi a makae a khoebo ho tloha ha ACH e fihla?"}
    I -->|"Moleng / Letsatsing le le leng"| J["Hlakola Unbatched ACH kapa Khatiso hang-hang NACHA ODFI Return/Recall"]
    I -->|"1 ho Matsatsi a 5 a Khoebo"| K["Batla ODFI Romela ACH Hopola + Lengolo la Tokoloho ho Lefapha la Bomenemene la RDFI"]
    G --> L["Daela 159 (UK) / Mohala oa Bomenemene ba Banka: Qala Hang-hang Interbank Freeze & Klemo ea Puseletso ea PSR APP"]
    H --> M["2. Bahlaseluoa ba Letsetsa ho Fumana Lefapha la Bomenemene ba Banka ka IMAD/UETR & Nomoro ea Akhaonto ea Mojalefa."]
    K --> M
    M --> N["3. Faela FBI IC3 (ic3.gov) nakong ea 72h ho kenya tšebetsong FBI RAT / Financial Fraud Kill Chain + Tlaleho ea Sepolesa sa Lehae"]

Mohato oa 1: Litlhahiso tsa bohlokoa tsa tekheniki tseo u tlamehang ho li fumana bankeng ea hau metsotsong e 15 ea pele¶

Ha u letsetsa banka ea hau, banka e amohelang, le FBI kapa mapolesa, u re "Re kentse $142,000 ho Bank of America hoseng hona" ha hoa lekana ho fumana transaction tsamaisong ea ho hlakola e tsamaisang limilione tsa melaetsa ka hora. Hang-hang u tlameha ho botsa Banka ea hau ea Origining bakeng sa nomoro e nepahetseng ea li-cryptographic / clearing trace bakeng sa terene ea tefo e sebelisitsoeng:

Hobaneng ha Mokena-lipakeng / Moqolotsi oa Libanka e le Motsoalle oa Hao e Moholo ka ho Fetisisa oa Khopolo ea Machabeng¶

Haeba senokoane se u qhekella hore u kenye mohala oa USD kapa EUR ho banka e kantle ho leoatle Hong Kong, China, Singapore, Dubai, kapa Europe Bochabela, mohala oa machaba oa SWIFT ha o khone ho romela melaetsa ka kotloloho ho tsoa bankeng ea heno ea US kapa Europe ho ea bankeng ea kantle ka metsotsoana e 5.

Ho e-na le hoo, mehala ea machaba e tsamaea ka har'a ketane ea Moqolotsi (Mokenari) Banks (joaloka JPMorgan Chase New York, Citibank N.A., Bank of New York Mellon, Deutsche Bank Frankfurt, kapa Standard Chartered) 'me e tlameha ho feta Time-Zone Cutoffs le **Automated Sanctions / Automated Sanctions / Automated Sanctions Hobane lihora tsa libanka tsa Asia-Pacific le Europe ha li tsamaellane le lihora tsa thapama tsa Amerika Leboea, mohala oa machabeng o rometsoeng ka 14:00 nako ea New York hangata o lula ka har'a mokoloko oa Banka ea New York kapa o lula o sa lumelloe ka har'a lethathamo la netefatso le kenang hoseng la banka bakeng sa 8 ho isa ho lihora tse 24.

• Mohato oo U Lokelang ho o Nka Hang-hang: Kopa banka ea hau ho hlahloba SWIFT gpi Tracker e sebelisa litlhaku tse 36 UETR. SWIFT gpi Tracker e bonts'a ka nako ea 'nete hore na ke Banka ea Bohareng e ts'oereng chelete hajoaleIn Transit at Intermediary khahlano le Credited to Beneficiary).
• Haeba terata e ntse e lutse Bankang ea Moreri e New York, London, kapa Frankfurt, banka ea hau e ka romella ntho e tlang pele SWIFT MT192 / camt.056 Emisa/Hopola ka kotloloho ho Banka eo ea Mokena-lipakeng ('me u ka lemosa Intermediary Bank's New York/London phaposi ea terata ka UETR), ho emisa chelete **pele e tloha sebakeng sa naha **.

Mokhahlelo oa 2: Ho kenya tšebetsong ketane ea FBI Financial Fraud Kill Chain (FFKC) le ts'ebetsong ea molao.¶

Ha o sebetsana le bomenemene ka terata ho feta $10,000 (haholo-holo $50,000+ ea khoebo kapa meaho e koalang mehala), lefapha la bosholu ba banka ea hau ke halofo feela ea equation. Mekhatlo ea ts'ebetsong ea molao e na le matla a molao a ho etsa hore ho emisoa ha tšohanyetso ha libanka li amohela le li-cryptocurrensets le pele ho saena lengolo la semmuso la lekhotla.

1. United States: Joang Sehlopha sa FBI Recovery Asset (RAT) le FFKC Mosebetsi¶

E thehiloe ka 2018 ka har'a Setsi sa Litletlebo sa Botlokotsebe ba Marang-rang sa FBI (IC3), Sehlopha sa Recovery Asset (RAT) se tsamaisa puisano lipakeng tsa liofisi tsa masimong tsa FBI, litsi tsa lichelete tsa malapeng, le Financial Crimes Enforcement Network (FinCEN) tlas'a Financial Fraud Kill Chain (FFKC) protocol.

Ho eketsa lebelo la ho FFKC hopola, kenya tlaleho ea hau ho ic3.gov hang-hang (u se ke ua ema ho fihlela hosane hoseng ho buisana le 'muelli oa molao pele, kenya faele ea ic3.gov foromo nakong ea hora ea pele ea ho sibolla bosholu) 'me u kenyelletse karolo e' ngoe le e 'ngoe e ka tlase e nang le zero typos:

1. Lebitso la Mohlaseluoa: Lebitso la hau la molao, lebitso la k'hamphani, nomoro ea mohala (sebelisa nomoro ea mohala e tobileng eo u tla e araba 24/7 lesale la pele), le aterese ea lengolo-tsoibila e sa sekisetseng.
2. Lintlha tsa Banka tsa Tšimoloho: Lebitso le felletseng la banka, aterese ea lekala, nomoro ea ak'haonte eo u tsoang ho eona, nomoro ea ABA, le lebitso/nomoro ea mohala ea ofisiri ea bomenemene ea banka eo u buileng le eena.
3. Lintlha tsa Banka ea Mojalefa (Moqhekelli): Lebitso le felletseng la banka e amohelang, e amohelang toropo/naha/naha ea banka, ABA Routing Number / SWIFT BIC, Nomoro ea Akhaonto ea Mojalefa, le lebitso le tobileng la Mojalefa le ngotsoeng litaelong tsa terata ea bolotsana.
4. Lintlha tsa Banka / Moqolotsi oa litaba (haeba li hlokahala): Lebitso leha e le lefe la moemeli oa banka, SWIFT BIC, kapa nomoro ea tsamaiso e thathamisitsoeng leqepheng la terata.
5. Transaction Metadata: Chelete e nepahetseng ea lidolara ho fihla ho sente, setempe sa nako hantle le letsatsi leo mohala o sebelitsoeng ka lona, le 22-character Fedwire IMAD/OMAD nomoro kapa SWIFT ea litlhaku tse 36 UETR.
6. Latela mohala ka mor'a ho romella ic3.gov:
   • Boloka/printa kopi ea PDF eo u e rometseng ic3.gov tletlebo hanghang.
   • Letsetsa ** Ofisi ea Tšimo ea FBI ea lehae** (fbi.gov/contact-us/field-offices) le Setsi sa Lekunutu sa United States sa lehae (USSS) (secretservice.gov/contact/field-offices, Lefapha la Lekunutu la Ts'ebetso ea Ts'ebetso ea Ts'ebetso ea Ts'ebetso ea Ts'ebetso ea Marang-rang ea BEC le hopola hammoho le FBI).
   • Bolella moemeli oa mosebetsi fonong: *"Re sa tsoa fana ka tletlebo ea IC3 ea tšohanyetso bakeng sa phetiso ea mohala e sebetsang ea Imeile ea Khoebo ea [$ Chelete] e rometsoeng lihora tse [X] tse fetileng. Re na le nomoro ea Fedwire IMAD / SWIFT UETR 'me re kopa tšebelisano e potlakileng le Sehlopha sa Thepa sa IC3 bakeng sa Khopotso ea Ketane ea Boqhekelli ba Lichelete.

2. United Kingdom: The 159 Hotline le Melao ea Puseletso ea Bomenemene ea Mphalane 2024 PSR¶

Haeba uena kapa k'hamphani ea hau e nyane / mokhatlo oa liphallelo United Kingdom le ile la qhekelloa hore le romele chelete ea banka (e tsejoang ka molao oa banka ea UK e le Authorised Push Payment (APP) Bomenemene, moo motho ea qhekellang a u qhekellang hore u fane ka tumello ea ho Faster Payment kapa terata ea CHAPS ka invoice ea fake, ho fetisa boits'oaro ba 'muelli oa molao, kapa bolotsana ba boikaketsi ba banka):

1. Daela 159 Hang hang: E o hokahanya ka kotloloho le desk ea thibelo ea bomenemene ea banka ea UK ho qala kopo e potlakileng ea Litefo tse Potlakileng / CHAPS ea ho emisa libanka ho banka e amohelang.
2. Kōpa Tokelo ea Hao ea Molao ea Puseletso e Tlamang Tlas'a Taolo ea Tsamaiso ea Tefo (PSR) Leano PS23/4 & PS24/3:
   • Tlas'a melaoana ea bohlokoahali ea UK Payment Systems Regulator e ileng ea sebetsa ka molao ka 7 Mphalane 2024, bafani ba litšebeletso tsa tefo tsa UK (PSPs) e hlokoa ka molao ho lefa bahlaseluoa ba bomenemene ba Authorized Push Payment (APP) bo romelloang ka Faster Payments kapa CHAPS ho fihla ho £85,000 nakong ea 5 matsatsi a khoebo (kapa ho fihlela matsatsi a 35 a khoebo haeba banka e kopa tokisetso ea lipatlisiso tsa "emisa oache"), ntle le haeba banka e ka paka hore moreki o na le molato o phahameng haholo. Standard of Caution) kapa o bile le seabo bomenemeneng.
   • Leha chelete e utsoitsoeng e feta £85,000 (mohlala, bolotsana ba ho fetisetsa depositi ea ntlo ea £250,000), u ka kopa £85,000 ea pele tlas'a morero oa PSR 'me u latele se setseng ho fihlela ho £430,000 ka ho phahamisetsa tletlebo ho Finans Serviceman Ombumbu.FOS, financial-ombudsman.org.uk) haeba banka e romellang kapa e amohelang e hlolehile ho beha leihlo mesebetsi ea eona e khahlano le bomenemene kapa tlas'a Mokhoa oa Puseletso ea Contingent (CRM) melao-motheo ea lefa.

Mokhahlelo oa 3: Merero e khethehileng ea ts'ebetso ka scenario ea terata¶

Tsela eo bomenemene bo etsahetseng ka eona e etsa qeto ea hore na ke mang hape ea lokelang ho tsebisoa hang-hang ho emisa bosholu ba bobeli le ho theha melato ea molao.

Boemo ba A: Ho koaloa ha Matlo / Sehlooho & Ho Hijacka Mohala oa Escrow (Ho Utsuoa Tefo ea HomeBuy Down)¶

Bomenemene ba ho koala thepa ka thepa ke e 'ngoe ea litlōlo tsa molao tse jang chelete e ngata haholo tse amang malapa. Bahlaseli ba sekisetsa ak'haonte ea lengolo-tsoibila ea ** Real Estate Agent, Mortgage Broker, Title Company, kapa Re koala Akhente ** likhoeli esale pele, ba shebelle k'halendara ka khutso bakeng sa letsatsi la hau la ho koala, 'me ba u romelle lengolo-tsoibila lihora tse 24 ho isa ho tse 48 pele u koala sehokelo sa nnete sa PDF: *"HO POTLAKILE: Litaelo tse ntlafalitsoeng tsa Wire bakeng sa [Lebitso la ho qetela la Khampani].

Haeba u sa tsoa lefa ntlo ea hau kapa u koala chelete ho motho ea bolotsana: 1. **Phetha Mehato ea 1, 2, le 3 ho tloha "Etsa sena hona joale" hang-hang : Fumana IMAD/OMAD ho tsoa bankeng ea hau, kopa Hold Harmless Recall hang-hang, letsetsa banka e amohelang bomenemene ka kotloloho, 'me u fane ka faele ho ic3.gov nakong ea metsotso e 30 ea pele. 2. ** Letsetsa Khampani ea 'Nete ea Lihlooho / 'Muelli oa Molao oa ho Koala ka Mohala Hang-hang: - Bolella ofisiri ea lekhetho ea Khampani le moeletsi oa kakaretso hore mohala oa hau oa ho koala o fetisitsoe ka lengolo-tsoibila le senyehileng. - Ba kope ho boloka litlaleho tsohle tsa li-imeile qetellong ea bona, ka ho khetheha ba hlahlobe hore na mohlaseli o kene ka kotloloho akhaonteng ea Microsoft 365 / Google Workspace ea Khampani kapa ak'haonte ea imeile ea Realtor. (Tlas'a melao ea bohlasoa ea mmuso oa US le Uniform Commercial Code bapisa lithuto tsa phoso, ho tseba hore na sistimi ea lengolo-tsoibila ea mang e robiloe ntle le MFA e lekaneng e bohlokoa haeba mohala o sa fumanehe liperesente tse 100 ke libanka). - Botsa Khampani ea Lihlooho hore na e na le Cyber ​​Crime / Social Engineering / Wire Fraud Endorsement Coverage kapa ho ikamahanya le motho ea ngotseng sehlooho (joalo ka Fidelity National Title, First American, Old Republic, kapa Stewart Title), bao bongata ba bona ba bolokang boinehelo ba bona 24/7 Rapid Wire Recovery Coalitions le likhokahano tse kholo tsa banka ho banka. 3. ** Tsebisa Morekisi le Barekisi ba Matlo ka ho Ngola **: Haeba chelete ea hau e koalang e hoamisitsoe phuputsong e sebetsang ea FBI / interbank, e-ba le 'muelli oa molao oa thekiso ea matlo hang-hang a romelle tsebiso e kopang bokhuts'oanyane

Boemo B: Boqhekanyetsi ba Invoice ea Barekisi ba K'hamphani (Khatiso e Lefshoang Liakhaonto tsa B2B)¶

Ka scam ea Invoice ea B2B, Liakhaonto tsa hau li Lefshoa (AP) lefapha le fumana lengolo-tsoibila ho tsoa ho morekisi oa 'nete, oa nako e telele (billing@supplier.com kapa sebaka se shebahalang hantle billing@suppIier.com) e reng: "Ka kopo hlokomela hore re fetotse ak'haonte ea rona ea khoebo ho tloha Wells Fargo ho ea ho Truist Bank; ka kopo ntlafatsa litaelo tsa rona tsa ACH/Wire bakeng sa Invoice #90412."

Haeba khoebo ea hau e sa tsoa lefa invoice ea 'nete akhaonteng ea banka ea bosholu: 1. ** Phethahatsa Bank Hold Hold Hamless Recall le FBI ic3.gov ho kenya hang hang**. 2. Khetholla hore na Seva ea Imeile ea Hao e Hlile e Senyehile (Ya Hao khahlano le Morekisi oa Hau): - Etsa hore sehlopha sa hau sa IT Security se hlahlobe tse tala EML lihlooho tsa melaetsa ea lengolo-tsoibila la bolotsana: - Bontša hore lengolo-tsoibila la 'Nete la Morekisi le Hacked (True Vendor Compromise): Lengolo-tsoibila le fetile SPF: PASS, DKIM: PASS, le DMARC: PASS bakeng sa sebaka sa 'nete sa morekisi (@supplier.com), 'me e tsoa ho li-server tsa 'nete tsa Microsoft/Google. Sena se bolela hore mohlaseli ha joale o lutse ka har'a inbox ea hau ea imeile ea morekisi. Letsetsa CFO ea morekisi oa hau le Motsamaisi oa IT mohaleng hang hang, hobane mohlaseli eena o ntse a romella litaelo tsa terata tsa bohata ho moreki e mong le e mong ka lebokoseng la poso la morekisi. - Letšoao la Sebaka se Loketseng / Lebitso la Display Spoof: Lengolo-tsoibila le tsoa @supp1ier.com kapa @supplier-payments.com (sheba whois letsatsi la tlhahiso, hangata le ngolisoa matsatsing a 14 a fetileng). Sena se bolela hore lebokoso la mangolo la mohiruoa oa hau le ile la robelloa (ho lumella senokoane ho bala invoice ea mantlha ea PDF le ho etsa sebaka se ts'oanang se ts'oanang) KAPA lebokose la poso la morekisi le robiloe mme senokoane se thehile sebopeho se tšoanang. Reply-To domain e le hore morekisi a se bone likarabo ho sephutheli sa hae se Rometsoeng. 3. Kenya Cyber Insurance & Crime Insurance Carrier ho Tsebiso ea Hanghang: - Boholo ba khoebo Cyber Liability Insurance maano le Commercial Crime / Fidelity Bond maano a kenyelletsa Social Engineering Fraud / Funds Transfer Fraud / Invoice Manipulation tumello ea khaso, MME li kenyelletsa 24/7 Incident Response Forensics & Legal Breach Coach hotline ho feta mehala ea hau ea ho tlola molao ka theko e ntle haholo. - Tlhokomeliso mabapi le Maqephe a Tsebiso ea Inshorense: Lipholisi tse ngata tsa inshorense ea cyber li hloka tsebiso nakong ea 24 ho isa ho lihora tse 72 ka mor'a ho sibolla phetisetso ea mehala ea bomenemene. Letsetsa mohala oa likopo tsa 24/7 leqepheng la hau la phatlalatso kajeno.

Boemo ba C: Boiketsiso ba CEO / Phethahatso ("Ho Fumana Lekunutu ka Potlako / Karete ea Limpho / Phetoho ea Moputso")¶

Haeba mosebeletsi a ile a qhekelloa ka lengolo-tsoibila, mongolo oa SMS, WhatsApp, kapa Deepfake AI Voice/Video Call a iketsa CEO kapa Managing Partner ho kenya chelete ak'haonteng ea kantle, kapa haeba Payroll e ile ea qhekelloa ho fetola Direct Deposit ea mookameli (ACH) nomoro ea ho tsamaisa: 1. Bakeng sa Diversion Direct Deposit Diversion: Ikopanye le Payroll Processor ea hau (ADP, Gusto, Paychex, Workday, Rippling, UKG) ka mor'a metsotso e seng mekae 'me u batle Hang-hang NACHA ACH Recall / Reversal le Fraud Freeze ho fumana karete e lefuoang pele kapa nomoro ea ho tsamaisa banka (hangata Green Dot, Chimeward, Banka ea Green kapa Pathncorp, Chimeward). Basebelisi ba meputso ba fane ka li-desk tsa ho khutlisa bomenemene ka bongata ka likamano tse tobileng libankeng tse fanang ka li-neo-bank.

Mohato oa 4: Mokhoa oa ho tseba hore na marang-rang a hau a ntse a tšoaelitsoe le ho thibela bosholu ba mohala oa bobeli¶

Bahlaseli ba atlehileng ho hula bosholu ba terata ba $100,000+ khahlanong le mokhatlo ** hoo e ka bang kamehla ba leka lekhetlo la bobeli nakong ea matsatsi a 7 ho isa ho a 14**, ba shebile invoice e 'ngoe e bulehileng ea barekisi eo ba seng ba e khoasollotse ho tsoa ho inbox ea hau ea liak'haonte, kapa ba romella bareki ba hau mangolo-tsoibila ho khelosa litefo tse Amoheloang tsa Liak'haonte tse kenang k'hamphaning ea hau.

Tlatsa tlhahlobo ena ea lintlha tse 5 pele o fana ka tumello ea litefo tse ling¶

1. Hlahloba Liak'haonte, Lichelete, Tsamaiso, le Lebokose la Lengolo la Molao bakeng sa Melao e Patiloeng & Lisebelisoa tsa OAuth:
   • Latela tataiso ea rona ho akhaonto ea imeile e hacked: melao e patiloeng ea ho fetisa le ho hlaphoheloa ho matha Get-InboxRule -IncludeHidden ka har'a lebokose le leng le le leng la mangolo mokhatlong oa hau, hlakola lits'ebetso tse sa tloaelehang tsa OAuth, 'me u hlahlobe melao ea lipalangoang tsa boemo ba bahiri.
2. Audit Entra ID / Lintlha tsa ho Kena tsa Google Workspace (Impossible Travel le Evilginx AitM Proxy IPs):
   • Sheba lintlha tsa ho kena matsatsing a 60 a ho qetela bakeng sa likhokahano tse tsoang ho li-VPN tsa khoebo, li-ASN tsa mofani oa baeti (DigitalOcean, Linode, Stark Industries, M247, Choopa/Vultr, OVH), kapa litoropo tse sa tloaelehang. Haeba mosebelisi a ile a sitisoa leha MFA e lumelletsoe, ba tobetse sehokelo sa Adversary-in-the-Middle (AitM) phishing (Evilginx / Tycoon 2FA). Hlakola li-tokens tsohle tsa ntlafatso (Revoke-MgUserSignInSession) le ho ntlafatsa basebetsi ba Lichelete/ba Phethahatso ho FIDO2 Hardware Security Keys.
3. Sheba hore na Lebitso la hau la Domain le Etsitsoe ka Sebaka sa Lookkalike:
   • Sheba dnstwist (dnstwister.report) bakeng sa domain name ea k'hamphani ea hau. Haeba mohlaseli a ngolisitse sebaka se bonahalang se shebahalang joaloka (joaloka ho fetola litlhaku tse nyane l e nang le tlhaku e kgolo I, kapa ho nkela sebaka m ka rn, kapa ho eketsa -billing.com), hang-hang fana ka ts'ohanyetso Tsebiso ea Tlokotsi ea Tlhekefetso ea Mongolisi oa Domain ho mongolisi ea tšoanang le mofani oa moamoheli (ho kenyeletsoa le EML lihlooho tse bonts'ang sebaka se sebelisetsoa bomenemene bo sebetsang ka terata, bangoli ba emisa libaka tse sebetsang tsa BEC tsa phishing nakong ea lihora tse ngata ha li fanoe ka lihlooho).
4. Tiisa Molao oa Khauta oa Ts'ireletso ea Wire & ACH (Tiiso ea Kantle-ntle ea Sehlopha):
   • Le ka mohla u se ke ua netefatsa litaelo tse ncha kapa tse fetotsoeng tsa mohala/ACH ka ho letsetsa nomoro ea mohala e hatisitsoeng ka har'a lengolo-tsoibila kapa invoice ea PDF e khomaretsoeng. Motho ea bolotsana o beha nomoro ea hae ea mohala ea Google Voice / burner ho invoice ea bohata ea PDF e le hore ha u letsetsa ho "netefatsa", senokoane se araba mohala ebe se tiisa nomoro ea routing eo e seng ea nnete.
   • Leano le Tlamang: Phetisetso e ngoe le e ngoe ea terata, tlhophiso e ncha ea morekisi, kapa phetoho ho lintlha tsa banka tsa morekisi / ea lefang chelete e fetang $1,000 e tlameha ho netefatsoa ka ho letsetsa **nomoro ea mohala e tsebahalang e nkiloeng ho konteraka ea hau ea mantlha ea morekisi ea kantle ho marang-rang kapa bukeng e ikemetseng ea sechaba **,' me e hloka ** tumello ea ho laola habeli ** (mosebetsi a le mong o qala bankeng ea bobeli; le ho lokolla letshwao la terata).
5. Bulela Positive Pay (bakeng sa Licheke le ACH) le Litšebeletso tsa netefatso ea Akhaonto:
   • Bulela ACH Positive Pay / Debit Blocks ho li-account tsohle tsa khoebo e le hore ho se be le mokha oa kantle o ka hulang mekitlane ea ACH e sa lumelloeng.
   • Ha o romella litefiso UK (Confirmation of Payee / CoPEU), EU (IBAN-Name Check e laetsoeng tlas'a EU Instant Payments Regulation), kapa US (Early Warning Services / Nacha Account Validation), netefatsa hore lebitso la mong'a ak'haonte le khutlisitsoeng ke marang-rang a hlakolang le ts'oana le lebitso la k'hamphani e reriloeng pele o lokolla chelete.

Lipotso tse botsoang khafetsa¶

Mehloli e hlahlobiloe¶

• Federal Bureau of Investigation (FBI, United States): Internet Crime Comlaint Center (IC3) Recovery Asset Asset Team (RAT), Financial Fraud Kill Chain (FFKC) Protocol, Business Email Compromise Liphatlalatso tsa Tšebeletso ea Sechaba (ic3.gov).
• Financial Crimes Enforcement Network (FinCEN, United States Department of Treasury): Keletso mabapi le Boqhekanyetsi ba Baikaketsi le Merero ya Dimule tsa Chelete / Lenane la Karabelo e Potlakileng (RRP) bakeng sa Likhopotso tsa Cross-Border Wire (fincen.gov).
• Setsi sa Tšireletso ea Cybersecurity le Infrastructure Security (CISA) & United States Secret Service (United States): Ho Itšireletsa Khahlanong le Koseletso ea Imeile ea Khoebo le Bomenemene ka Mehala ea Litša (cisa.gov, secretservice.gov).
• Payment Systems Regulator (PSR) & Financial Control Authority (FCA, United Kingdom): Polelo ea Leano PS23/4 & PS24/3: Ho Loantšana le Push Payment Authorized (APP) Scams: Tlhokahalo e Tlamang ea Puseletso bakeng sa Litefo tse Potlakileng le CHAPS (Ho Qala ka la 20 Mphalane 20, 20)psr.org.uk).
• European Payments Council (EPC, European Union): SEPA Credit Transfer (SCT) le SEPA Instant Credit Transfer (SCT Inst) Rulebooks: Recall for Fraudulent Origin (SCT)FRAD / camt.056) (europeanpaymentscouncil.eu).
• Komisi e Tšoanang ea Molao / Setsi sa Molao sa Amerika (United States): Khoutu e Tšoanang ea Khoebo (UCC) Article 4A: Phetisetso ea Lichelete (§ 4A-207 Tlhaloso e fosahetseng ea Mojalefa; § 4A-211 Ho Hlakola le Tokiso ea Taelo ea Tefo) (uniformlaws.org).

Litataiso tse amanang¶

• Hacked email account: hidden forwarding rules and recovery
• Tlolo ea akhaonto ea banka
• Deepfake voice clone le botsotsi ba boikaketsi ba AI
• Phishing and compromised accounts
• Cryptocurrency sepache drain le peō poleloana sekisetsa
• Bomenemene le bomenemene